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IN THE CLAIMS: 

The text of all pending claims (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

Please AMEND claims 1 , 8, and 1 5 and CANCEL claims 4, 1 1 , 1 6 and 1 7, and ADD 
claims 18 and 19 in accordance with the following: 

1 . (CURRENTLY AMENDED) A cipher designing apparatus for designing cipher 
logic of a cipher device that effects cipher or decryption per block by using an F-function for 
converting input bits to output bits using a plurality of S-boxes, said cipher designing apparatus 
comprising: 

an inputting unit inputting 

a memory capacity of a high-speed referable memory provided to said cipher 

device, 

an entire inputting and outputting bit number being input to and output from said 
cipher device, and 

a minimum input and output bit number of said S-boxes as an initial value: 
a tentative decision unit 

dividing the entire input and output bit number by the initial value to acguire an 
integer guotient and an integer remainder, 

making a first set composed of the integer guotient pieces of the initial value. 

subtracting a number of one from the remainder integer number when the 
remainder integer number is not zero, and adding the subtracted number of one to the initial 
value in the first set one by one until the integer remainder becomes zero, so as to acguire a 
second set composed of integer numbers, and 

tentatively deciding the integer numbers in the second set as a tentative inputting 
and outputting bit number of S-box: 
a combining unit 

combining the integer numbers so as to make a third set of integer composed of 
combined integers: 

a selecting unit s ele ct i ng an i nput and output b i t number of sa i d plura li ty of S boxos 
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bas e d on a m e mory capac i ty of a h i gh - sp ee d r e f e rab le m e mory prov i d e d to said ciph e r d e v i c e , a 
m i n i mum input and output numb e r of th e S - box e s and an e nt i r e i nput and output numb e r of th e 
b l ock, said se l ect i ng i nc l uding dotormin i ng an opt i ma l comb i nat i on of i nput and output b i t 
numb e rs of e ach of th e S box e s for usab le m e mory capac i ty of sa i d m e mory; and 

determining how many pieces of the combined integers are in the third set, 

repeating the tentatively deciding, combining and determining until a number of 
the combined integer numbers becomes egual to a final number that is calculated based on the 
memory capacity and the entire inputting and outputting bit number, and 

selecting, when the number of the combined integer numbers becomes egual to 
the final number, the combined integers of the third set to be an optimal combination of input and 
output bit numbers of each of the S-box 
a S-box generating unit 

generating a plurality of S-boxes each having the input and output bit number 
selected by said selecting unit. 

2. (ORIGINAL) The cipher designing apparatus according to claim 1 , further 
comprising a F-function generating unit which generates an F-function having said plurality of S- 
boxes generated by said S-box generating unit. 

3. (ORIGINAL) The cipher designing apparatus according to claim 1 , wherein said 
selecting unit selects the input and output bit number of each S-box in such a manner that a sum 
of sizes of said plurality of S-boxes becomes largest within a memory capacity of a primary 
cache memory installed in a processor provided to said cipher device. 

4. (CANCELLED) 

5. (ORIGINAL) The cipher designing apparatus according to claim 1 , further 
comprising a smallest input and output number specifying unit which specifies a smallest value 
of the input and output number of said plurality of S-boxes. 

6. (CURRENTLY AMENDED) The cipher designing apparatus according to claim 
[[4]]1, wherein sa i d comb i n i ng un i t comp le t e s comb i n i ng of th e i nput and output numb e rs bas e d 
on a f i na l v al u e d e t e rm i n e d by th e e ntir e i nput and output b i t numb e r of s ai d b l ock and th e 
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m e mory capacity of sa i d the high-speed referable memory is a primary cache memory. 



7. (CURRENTLY AMENDED) The cipher designing apparatus according to claim 
[[4]]1_, wherein said tentative decision unit tentatively decides the input and output number of 
each S-box by allocating said remainder, if there is any, to the input and output numbers of the 
S-boxes that are placed apart at remotest positions. 

8. (CURRENTLY AMENDED) A cipher designing method for designing cipher logic 
of a cipher device that effects cipher or decryption per block by using an F-function for 
converting input bits to output bits using a plurality of S-boxes, the method comprising: 

inputting 

a memory capacity of a high-speed referable memory provided to said cipher 

device, 

an entire inputting and outputting bit number being input to and output from said 
cipher device, and 

a minimum input and output bit number of said S-boxes as an initial value; 
dividing the entire input and output bit number by the initial value to acguire an 
integer guotient and an integer remainder; 

making a first set composed of the integer guotient pieces of the initial value; 

subtracting a number of one from the remainder integer number when the remainder 
integer number is not zero, and adding the subtracted number of one to the initial value in the 
first set one by one until the integer remainder becomes zero, so as to acguire a second set 
composed of integer numbers; 

tentatively deciding the integer numbers in the second set as a tentative inputting and 
outputting bit number of S-box; 

combining the integer numbers so as to make a third set of integer composed of 
combined integers; 

determining how many pieces of the combined integers are in the third set; 

repeating the tentatively deciding, combining and determining until a number of the 
combined integer numbers becomes egual to a final number that is calculated based on the 
memory capacity and the entire inputting and outputting bit number: 

s e l e cting an i nput and output b i t numb e r of said p l ura li ty of S box e s bas e d on a m e mory 
capac i ty of a h i gh sp ee d r e f e rabl e m e mory prov i d e d to sa i d c i ph e r dov i co, a m i n i mum input and 
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output numb e r of th e S - box e s and an e nt i r e i nput and output numb e r of th e b l ock, sa i d s ele ct i ng 
i nc l ud i ng d e t e rm i ning an opt i ma l comb i nat i on of i nput and output b i t numb e rs of e ach of th e S- 
box e s for usab le m e mory capac i ty of s a i d m e mory selectinq, when the number of the combined 
integer numbers becomes equal to the final number the combined integers of the third set to be 
an optimal combination of input and output bit numbers of each of the S-box ; and 

generating a plurality of S-boxes each having the input and output bit number selected. 

9. (PREVIOUSLY PRESENTED) The cipher designing method according to claim 
8, further comprising: 

generating an F-function having said plurality of S-boxes generated. 

1 0. (PREVIOUSLY PRESENTED) The cipher designing method according to claim 
8, wherein when the input and output bit number are selected, the input and output bit number of 
each S-box is selected in such a manner that a sum of sizes of said plurality of S-boxes 
becomes largest within a memory capacity of a primary cache memory installed in a processor 
provided to said cipher device. 

11. (CANCELLED) 

12. (PREVIOUSLY PRESENTED) The cipher designing method according to claim 
8, further comprising : 

specifying a smallest value of the input and output number of said plurality of S-boxes. 

13. (CURRENTLY AMENDED) The cipher designing method according to claim 448, 
wherein th e comb i n i ng i s comp le t e d bas e d on a f i na l va l u e d e t e rm i n e d by th e e nt i r e i nput and 
output b i t numb e r of sa i d b l ock and the m e mory capac i ty of said the high-speed referable 
memory is a primary cache memory. 

14. (CURRENTLY AMENDED) The cipher designing method according to claim 448, 
wherein when tentatively deciding input and output number, the input and output number of each 
S-box is tentatively decided by allocating said remainder, if there is any, to the input and output 
numbers of the S-boxes that are placed apart at remotest positions. 
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15. (CURRENTLY AMENDED) A computer readable medium for storing instructions, 
which when executed by a computer, causes the computer to realizes a cipher designing 
method for designing cipher logic of a cipher device that effects cipher or decryption per block by 
using an F-function for converting input bits to output bits using a plurality of S-boxes, the 
method comprising; 

inputting 

a memory capacity of a high-speed referable memory provided to said cipher 

device, 

an entire inputting and outputting bit number being input to and output from said 
cipher device, and 

a minimum input and output bit number of said S-boxes as an initial value; 
dividing the entire input and output bit number by the initial value to acguire an 
integer guotient and an integer remainder; 

making a first set composed of the integer guotient pieces of the initial value; 

subtracting a number of one from the remainder integer number, when the remainder 
integer number is not zero, and adding the subtracted number of one to the initial value in the 
first set one by one until the integer remainder becomes zero, so as to acguire a second set 
composed of integer numbers; 

tentatively deciding the integer numbers in the second set as a tentative inputting and 
outputting bit number of S-box: 

combining the integer numbers so as to make a third set of integer composed of 
combined integers; 

determining how many pieces of the combined integers are in the third set: 

repeating the tentatively deciding, combining and determining until a number of the 
combined integer numbers becomes egual to a final number that is calculated based on the 
memory capacity and the entire inputting and outputting bit number; 

s ele ct i ng an i nput and output b i t numb e r of sa i d p l ura li ty of S box e s bas e d on a memory 
capac i ty of a h i gh - sp ee d r e f e rab le m e mory prov i ded to sa i d c i ph e r d e v i c e , a m i n i mum i nput and 
output numb e r of th e S - box e s and an ent i r e i nput and output number of th e block, sa i d s ele ct i ng 
i nc l ud i ng d e t e rm i n i ng an opt i ma l comb i nation of i nput and output b i t numb e rs of oach of th e S 
box e s for usabl e m e mory capac i ty of sa i d m e morv selecting, when the number of the combined 
integer numbers becomes equal to the final number, the combined integers of the third set to be 
an optimal combination of input and output bit numbers of each of the S-box : and 
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generating a plurality of S-boxes each having the input and output bit number selected. 

16. (CANCELLED) 

17. (CANCELLED) 

18. (NEW) The cipher designing apparatus according to claim 1, wherein said final 
number is calculated by an integer portion of ((the entire input and output bit number)/log 2 (a size 
of the high-speed referable memory)) +1. 

1 9. (NEW) The cipher designing method according to claim 8, wherein said final 
number is calculated by an integer portion of ((the entire input and output bit number)/log 2 (a size 
of the high-speed referable memory)) +1. 
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